skills.rest
ImaginerLabs
ImaginerLabsOFFICIAL
Explore all skills by this author →
GitHub

security-review

Scan codebases for security vulnerabilities and generate severity-grouped findings with patch proposals.

Updated Apr 10, 2026
Search Tags:#security#code-review#secrets-detection#vulnerability-scanning#patch-generation#dependency-audit#data-flow-analysis
One-click install
npx skills add https://github.com/ImaginerLabs/skill-manager --skill security-review-imaginerlabs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ImaginerLabs/skill-manager/tree/main/skills/coding/security-review
Command: npx skills add https://github.com/ImaginerLabs/skill-manager --skill security-review-imaginerlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill performs deep, human-style security reviews of source code to find vulnerabilities that simple pattern-matching tools miss, reducing the time and expertise required to detect exploitable flaws across a project.

Core Features & Use Cases

  • Cross-file data flow analysis: trace user input across modules to discover injection, SSRF, and insecure deserialization that only appear across files.
  • Dependency audit & secrets detection: flag vulnerable packages, hardcoded keys, and exposed credentials in config, CI, and Dockerfiles.
  • Actionable reporting and patches: group findings by severity with confidence ratings, include file paths and code snippets, and propose concrete, human-reviewable patch suggestions for CRITICAL/HIGH issues.
  • Use Case: Run a full security audit on a web application repository to find SQLi, XSS, command injection, hardcoded API keys, and broken object-level authorization.

Quick Start

Scan the repository root for security issues and generate a grouped findings report with severity, confidence, file locations, and proposed patches for human review.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find security vulnerabilities in my source code?▼

To find security vulnerabilities in source code, trace cross-file data flows, audit dependencies, and detect hardcoded secrets to produce grouped findings by severity with confidence ratings and patch suggestions.

What is cross-file data flow analysis for security review?▼

Cross-file data flow analysis traces user input across modules to discover injection, SSRF, and insecure deserialization vulnerabilities that only appear when examining interactions between multiple files.

Can I scan my JavaScript and Python project for hardcoded secrets and vulnerable dependencies?▼

Yes, you can scan JavaScript, TypeScript, Python, Java, PHP, Go, Ruby, and Rust projects to flag vulnerable packages, hardcoded keys, and exposed credentials in config, CI, and Dockerfiles.

How do I generate patches for SQL injection and XSS vulnerabilities?▼

To generate patches for SQLi and XSS, run a full security audit that produces concrete patch diffs for CRITICAL and HIGH severity findings, which require human approval before application.

Does automated code review detect broken object-level authorization?▼

Yes, automated code review detects broken object-level authorization by performing deep, human-style security analysis to find exploitable flaws that simple pattern-matching tools miss.

What is the best way to audit dependencies for known vulnerabilities?▼

The best way to audit dependencies is scanning the repository root to flag vulnerable packages and exposed credentials, then generating a grouped findings report with severity, confidence, and file locations.

Related Skills

Explore More Software Engineering Skills→
LawrenceHwangLawrenceHwang

security-review

Identify security vulnerabilities in codebases and generate patch recommendations.

Community
Advanced
AdeptMindAdeptMind

code-security-audit

Scan application code for OWASP Top 10 vulnerabilities and hardcoded secrets.

Official
Advanced
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
wyattowalshwyattowalsh
4

security-scanner

Scan codebases for SAST, secrets, and dependency vulnerabilities.

Community
Advanced